Avatar of vianceadmin
vianceadmin
 asked on

Can an Exchange server receive emails from an upstream mail scanner if the Exchange services aren't started?

Trying to track down some emails.  Our mail scanners are saying that they were processing emails and sending them to the exchange server (scanner logs say that they were successully delivered to the email server) but the Exchange services weren't started (We lost power and Exchange server came up after AD servers so Exchange services didn't start).  Rebooted the Exchange server and services started but I'm just trying to track down those emails that were sent to the Exchange server during that time (when Exchange services weren't started).  Thanks in advance...Using Exchange 2003 and mail scanners are Symantec Messaging Gateway scanners...
Exchange

Avatar of undefined
Last Comment
ckratsch

8/22/2022 - Mon
vianceadmin

ASKER
Also looked in the queue in D:\Exchsrvr\Mailroot\vsi 1\Queue but nothing there...
ASKER CERTIFIED SOLUTION
Member_2_4940386

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
vianceadmin

ASKER
According to the Symantec scanner logs, it says that it was delivered to ipaddress:25

Could the SMTP service have been started so it could receive the email but Exchange services not started?
Member_2_4940386

That is possible - I assumed when you said the Exchange servers were down that SMTP was down.  If that is what happened when Exchange restarted the queue should process immediately and deliver.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
vianceadmin

ASKER
Not sure.  I just know that the Information Store (and I assume the other Exchange services) wasn't started.  I'm looking in the Message Tracking Center and I don't see the email to this user (I see emails once the server was rebooted and the Exchange services were back online).  Anywhere else to look?  Is there a way to see if the Exchange server received the email from the scanner?  IIS logs?
ckratsch

As long as the Simple Mail Transfer Protocol service is running, the server will accept mail, but if the information store service is down, the mail should queue locally until its timeout period runs out.

http://technet.microsoft.com/en-us/library/aa996068(v=exchg.65).aspx
Postmaster

If 2007 or later the items may be in the HUB server queue.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
vianceadmin

ASKER
So it sounds like the SMTP service was running (since Symantec was able to successfully connect to ipaddress:25) but if that's the case, where would the emails queue up until the exchange services are started?
vianceadmin

ASKER
Are there any log files that would show me anything during that time (Exchange services stopped but SMTP service running and accepting emails)?
Postmaster

Message tracking on the HUB logs would show the mail traffic
Your help has saved me hundreds of hours of internet surfing.
fblack61
vianceadmin

ASKER
Exchange 2003 so no HUB server...
Postmaster

Try your MTA queues.
vianceadmin

ASKER
Nothing in the MTA queues either...
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Postmaster

Run up perfmon and add any MTA queues or SMTP queue values (queue length).
It has to be somewhere, unless the message expiry time has passed. (common value is 48 hours)
vianceadmin

ASKER
I've requested that this question be deleted for the following reason:

Please Delete.
ckratsch

Was the problem resolved in some way?
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23